Risk Management
Risk Management
Use the risk register and reports to track decisions and communicate risk posture.
Risk Management
Risk Management in the app lives under:
/risk/register→ Risk Register/risk/reports→ Reports
Risk management connects uncertain events to accountable decisions. The register holds the source records; reports are versioned snapshots for review and communication.
Use risks to connect assets, controls, policies, findings, vendor exposure, privacy assessments, and treatment work. A compliance gap is not automatically a risk, and a risk is not resolved merely because a control exists—the treatment and residual assessment must reflect what actually operates.